ci.yml

name: Continuous Integration
on:
  # Main branch updated
  push:
    branches:
      - main
  # Pull request
  pull_request:
    types:
      # Newly opened
      - opened
      # Updated (excludes change of base branch)
      - synchronize

jobs:
  test:
    strategy:
      matrix:
        platform: [ ubuntu-latest, macos-latest, windows-latest ]
        node-version: [ ^18.0.0, ^20.0.0 ]
    runs-on: ${{ matrix.platform }}
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-node@v4
      with:
        node-version: ${{ matrix.node-version }}
    - run: npm ci --ignore-scripts
    - run: ./node_modules/.bin/c8 --reporter=lcovonly npm test
    - uses: codecov/codecov-action@v4.4.1
      with:
        token: ${{ secrets.CODECOV_UPLOAD_TOKEN }}

  pnpm-check:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-node@v4
      with:
        node-version: ^20.0.0
    - uses: actions/cache@v4
      env:
        cache-name: cache-pnpm-modules
      with:
        path: ~/.pnpm-store
        key: pnpm-check-${{ env.cache-name }}-${{ hashFiles('**/package.json') }}
        restore-keys: pnpm-check-${{ env.cache-name }}-
    - uses: pnpm/action-setup@v4.0.0
      with:
        version: ^8.15.4
        run_install: |
          - args: [--ignore-scripts]
    - run: pnpm run compile
    - run: pnpm test

  release-readiness:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-node@v4
      with:
        node-version: ^20.0.0
    - run: npm ci
    - run: npm run release-readiness

  dependabot-approveOrMerge:
    needs: [test, pnpm-check, release-readiness]
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
      contents: write
    steps:
    - uses: actions/checkout@v4
    - name: Assess changes
      uses: tony84727/changed-file-filter@v0.2.3
      id: filter
      with:
        filters: |
          requirementsChanged:
            - 'package.json'
    - name: Merge lockfile changes
      uses: fastify/github-action-merge-dependabot@v3.10.1
      if: steps.filter.outputs.requirementsChanged == 'false'
      with:
        github-token: ${{ secrets.GITHUB_TOKEN }}
    - name: Approve requirement changes
      uses: fastify/github-action-merge-dependabot@v3.10.1
      if: steps.filter.outputs.requirementsChanged == 'true'
      with:
        github-token: ${{ secrets.GITHUB_TOKEN }}
        approve-only: true